Prefer the secure protocol by default. We do not update schema
links since they're often standardized with protocol included.

Note that the link to the Windows certificate store patch
in the openssl.org bug tracker requires a login now.